Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/abcae0e0-5df0-34f1-a861-2b26944ded28.roa
File:                     abcae0e0-5df0-34f1-a861-2b26944ded28.roa (raw, json)
Hash identifier:          /H6CfvHwgEbuWb3CZP+FCTOTWSgxmJxkrqB/BoDN0Uw=
Subject key identifier:   5D:09:3D:5D:9D:82:F4:62:3F:48:C5:73:21:38:57:A4:AA:88:7D:45
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F43285840BB0FF68FFF9085EE792D6400
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/abcae0e0-5df0-34f1-a861-2b26944ded28.roa
Signing time:             Sat 28 Jan 2023 12:00:00 +0000
ROA not before:           Sat 28 Jan 2023 12:00:00 +0000
ROA not after:            Sun 05 Mar 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        18.138.0.0/15 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:bb:0f:f6:8f:ff:90:85:ee:79:2d:64:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Jan 28 12:00:00 2023 GMT
            Not After : Mar  5 05:00:00 2023 GMT
        Subject: CN=1b1ffe10-6a26-4c04-a257-7a55b3bc6fd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:8c:f1:15:96:8f:29:5d:60:59:8d:e6:6f:4a:
                    a6:59:0b:ae:a8:c5:29:00:20:2f:03:23:4e:51:a9:
                    5e:3c:99:8e:2a:78:b5:00:cf:14:3b:80:63:72:50:
                    87:a3:0e:10:43:16:ec:5a:55:bf:13:1c:2a:4a:76:
                    7c:d3:28:c7:e7:4f:2c:a8:53:bc:6e:37:07:13:c2:
                    7c:1f:8d:5d:01:59:9e:9b:3d:5c:c2:9a:11:12:2a:
                    ba:9c:c2:9e:18:e7:65:96:c3:a9:8c:a3:6a:26:b8:
                    a1:e4:eb:ca:06:cd:89:9b:f6:a3:5d:b6:e5:97:ca:
                    3d:23:22:55:fd:74:03:57:2f:26:b1:bf:c1:83:59:
                    39:13:1f:6d:45:ba:f4:57:ac:4a:fb:d4:23:1f:54:
                    77:b0:b5:29:de:10:e3:6b:a0:e2:5a:c2:b0:ca:3d:
                    d0:ab:86:99:a0:01:42:6c:6e:18:3d:2b:86:64:9d:
                    8a:91:c7:c3:cd:99:fb:e4:8b:c9:49:13:c1:e0:d2:
                    0a:56:0e:a6:0f:e5:2d:21:6a:86:2d:e2:cd:b3:a8:
                    8e:28:47:3d:f0:ce:dd:ef:1e:78:e2:d5:ca:ae:f7:
                    fc:9b:8c:14:81:bb:8d:a4:0f:c8:bc:ad:75:39:38:
                    6f:a0:1b:d1:16:d1:c1:54:93:3e:e0:db:19:ce:65:
                    0c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:09:3D:5D:9D:82:F4:62:3F:48:C5:73:21:38:57:A4:AA:88:7D:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/abcae0e0-5df0-34f1-a861-2b26944ded28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.138.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:27:9e:6d:cf:72:a8:f7:d2:5e:54:09:07:16:84:2a:9c:09:
         29:09:b9:bc:fd:af:7e:3f:db:2a:f5:b3:1a:57:51:bd:bf:af:
         8e:88:f2:5f:cb:89:4c:a7:9e:4d:53:ac:01:83:84:40:96:82:
         ba:a5:5a:6e:26:e6:29:82:80:bc:d4:ab:19:43:15:f7:cc:a4:
         b7:2f:11:c5:60:bb:e6:03:b7:ee:4a:db:ae:17:02:18:3b:fc:
         ed:d1:29:09:29:2e:dd:9c:30:ef:f2:62:96:24:28:7c:e2:27:
         13:15:1a:36:2e:67:14:b1:b0:bc:83:eb:52:3e:95:cc:98:72:
         0a:f2:1f:70:64:dc:f1:c2:b1:b9:cb:18:1d:70:3c:12:1f:dd:
         82:f5:69:fb:aa:d6:47:5f:51:31:1a:8d:13:df:a5:58:d0:51:
         f3:6a:ce:9b:de:cf:46:58:d8:7c:4a:6f:da:63:59:4b:9f:c1:
         03:06:44:9b:b0:8f:e6:c2:96:46:ea:17:8d:3e:a1:67:ca:18:
         fe:55:05:9a:9d:f4:fe:21:5d:bc:57:53:32:43:9f:15:91:fa:
         fd:8f:d1:23:32:30:b3:4c:3a:e8:13:0f:94:78:cb:73:63:72:
         68:f1:94:b1:8a:d7:a2:47:29:5f:c6:bc:73:46:2d:b3:60:23:
         4d:3d:7e:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----